Implementation:Promptfoo Promptfoo Code Scan Package Lock

Knowledge Sources	Promptfoo_Promptfoo
Domains	Build_System, Dependencies
Last Updated	2026-02-14 07:45 GMT

Overview

npm lockfile that pins exact dependency versions for the @promptfoo/code-scan-action GitHub Action package, ensuring reproducible builds.

Description

The Code_Scan_Package_Lock (code-scan-action/package-lock.json) is the npm v3 lockfile for the standalone GitHub Action package that performs code scanning. It locks the exact versions of dependencies (@actions/core, @actions/exec, glob) and their transitive dependency tree to ensure CI builds produce identical results regardless of when npm install is run.

Usage

This file is consumed automatically by npm install within the code-scan-action directory. It should not be edited manually.

Code Reference

Source Location

• Repository: Promptfoo_Promptfoo
• File: code-scan-action/package-lock.json
• Lines: 1-982

Signature

{
  "name": "@promptfoo/code-scan-action",
  "lockfileVersion": 3,
  "packages": { /* dependency tree */ }
}

Import

cd code-scan-action && npm install

I/O Contract

Inputs

Name	Type	Required	Description
(none)	—	—	Read by npm during install

Outputs

Name	Type	Description
node_modules	Directory	Exact pinned dependency tree

Related Pages

• Environment:Promptfoo_Promptfoo_Node_Runtime